CVE-2026-2096

CVE-2026-2096 describes a critical Missing Authentication vulnerability in Flowring's Agentflow software. This flaw allows unauthenticated remote attackers to fully compromise the database, enabling them to read, modify, and delete its contents. With a CVSS score of 9.8, this vulnerability presents a severe risk due to its network-based attack vector, low attack complexity, and complete impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the high FAUCET Risk Score of 95/100 indicates its potential for severe consequences if exploited.